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(54) INTRUSION DETECTION DEVICE, SYSTEM, AND ROUTER 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide an intrusion 
detection device capable of detecting an unauthorized 
access intrusion such as DDoS(distributed denial of 
service) attack automatically with high accuracy. 
SOLUTION: An intrusion detection unit of a router 
acquires from a communication route a packet which 
reaches at the router, and generates a structure 
corresponding to each session based on network layer 
data and transport lay data described in the header of 
the packet. This structure is discarded when the session 
is terminated normally. The intrusion detection unit 
inspects the total number n of structures for each 
prescribed period. If there is any structure with a 
prescribed threshold nth or more as a result of the 
inspection, the unit detects it as the unauthorized 
access intrusion occurrence. Since a structure is 
generated for each session and the presence/absence 
of the unauthorized access intrusion is detected, based 
on the number of the generated structures, a DDoS 
attack, which establishes a large volume of different sessions, can be detected automatically 
with high accuracy. 
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[0 0 5 3] SJt^r-y Hf8lcD^tfcg^/^7 htf 

^ttnti (xt7^v7ono) , ^A^msui Hi> 

*/Mr?htffcftH S) , fSA$ 

(USUI Hi, H^/^H£^TEf#LfcfrSfr«: 
WflifS (Xx7?V8) o Sft, Xf7 7 s V6«fi 

[0 0 5 4] ^MWgiJMi, IKt#2ft/cf!^/Vr-y h 40 

s ft ti ^ ^ h tt is t l t * nr ^ 5 g»/ ^ 

•y7v8©N0) , ^»^y>y hofiJ#^snrv^ 
fc**&it&Jt>^ SA&WS51 HI ^fflS£l¥7 
T5o -g?bT^nt£ (Xf7^V80YES) , -» 

cD^r-y f-^T^T^f^nftt^ensA^, ma 
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[0 0 5 5] <fc DH&Wfcti, flA^tfJ^ 1 1 ti, 

- y h mm-s y ?*<Dy->ryxmttmi. 

(Xr7 7*V9) 0 SSK^ttrafctt, #A 

fctagpi is, g^ntc»^-y h^^tu 

y X#^fr S Jtfc££fci5 § 2 $ @ O/^r 7 h 

If (Xr77°V 9©YE S) t MA^tfi^l l 2# 
g©^T'y h^ftgl^y htc^-TS (Xf77 I V 1 

0) 0 

[0 0 5 6] *©ft, MA^tUgE 1 1 ti, -f^TcD^T 
7 FOOI7LftfrSMffflt§ (Xf7 7*V 1 

1) 0 T^TtD/^'y h<D%&miLT^ 
r^(DZ\ m\$&m \ Hi, 2#lo^yhSJ*t 

tu ±vixtv7v 9<Dmmmic®?Tt%, ^y 

•y bvm$tM7tti& (Xr'y^V 1 1C0YE S) , 

?&7*-feXt»*5i:#*.5ft*JtP5. SAttfflSIJl 1 
ti, 3R«iifl:*SS«*r5 (Xf'^V 12)0 
[0 0 5 7] 9 ^/^7 

tf, ^lE/^-y hTSSRlliltelASftT^V^ii), SA 
^ffig|5l Hi, CfiO^T-W^^yhWilS^g* 

3) o 

[0 0 5 8] Bl Oti, ;l/-?2©»£»^t^ 

©PglilLT, fegJB, f-^'Jyy (D/L) a I 
PJS, TCPl*3j;a'±fiAPi5WLTi^ 0 fft, 
;b-^2(i, 7.7 h7-^HT*SS I Pl*3iD>9> 
X^-MT'SSTCPlor^ill DSJf^LT^ 
S 0 ;l/-^2tcgM-r^^r-y Ki, I P]i43j:tfTC 

pmnir 1 d ss^fei^Tsaasn, ^'?^5f 

-*ST*BI»MltTfi£SSnSo tfctoS, *7h7 
[0 0 5 9] W±© J; 3 t C OHffi®ff5H 2 (C ititf , 

ta^v^T^itft^st^a^a^^bT^^. b 

fta^T, ^lE^r-y hO*i/3 ym&t&WyVZ 

t icmzrz&bic^m h nm^mmMicmut 5 ti 
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[0 0 6 0] HSS?mi3 

J:IS*l©^il 2 ?fct HlO/^ -y h £t^T©f# L 
Sit^fcfe^T^y MSMyifclgfrLTVSo uft 
[0 0 6 1] ±a(Dj;dt-, ^I/^-yUcfeKli'N 10 

y#k$m<Drf>ryh£<Dffl<o&&mi.%wx\ -1 

ztcmc^y h<otzG9mzmu m\mi$xz 

[0 0 6 Z] HI 1 tt, 3»^Jfi©0Si3{i:^Sfl|jii*4 
[0 0 6 3] fSA^HHgp 1 IB, mm l 2frZWy 

izwm&t uf-^wi) , ±&mi*tc. m 

r-y7W3©YES) , lAfctHSS 1 1 fi, Sgtftltt 

£i»rr* (xf7/w4) D m'mmifm 30 
(xt^:/w3<ono) , ftAfctusn ni, ±te-tr> 
3 ^gij?{c*fiS-r«Piij**sf Actors (xf7 

7W5) o 

[0 0 6 4] £fc, MAMftgP 1 1 (±, gf#©fil£{*£ 

Wfcfi* MA^iUgPl 1(±, W#£ftfc/^>y htfyvy 
^fB$£ftTi^>-^>x#^{$££nT^5 1 
Sfclijf &©;Vr h CD'vy iTfcaffi$2ftT^S ^>-^ 

y*m% t zmtz c tc <t t) , tu^y - y h s fctt* 
[0065] *<ojgs, ^-^yx#^^e»ETS^t 
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7^W7) 0 iDMttftfcii, EffSftfe/^yh®;* 
/^■y(-tf£H$3ftT^3f§^ MAM^l lt±, U 

^gjtP^WHU-rs, mmnrc^-y bom** 
nfe^^r-y h©/^-y hs^ffift^nri^^^^ b 

©'vym2&2ftT^5#;^y blfc-SfSa^ 

^wsu-r§ 0 -r&fc-^ a^-rs^^r-ybKr-s^tt 

[0 0 6 6] ^^H^ftTl^fi^jl^tt^i; 
nTl^T^Bj^T-feSi^ (Zr'yyW7tOYE 

s) , «A«itbBP 1 n±, ffi^^nfc^yhtffift^ 

tn>S><^-y hfc£$S£t5 Ux-y7W8) o - 
*y->ryx$^VtmfrlzmmtZrt>rv hX&% 

ttn if ^ - y h m E(d^ -y ^o^iijb^s^tt^ 

*<S^ilT*feS«^ af7^W7©N0) 4 fSA 

C££$£T5 UT77W9) o 
[0 0 6 7] ±ISXr-y^W8iCfcV^T/^7 

TLTV^ftW-tllf (Xf7 yWl 0ON0) , «AtStfl 

rf : n 1 i^jQ.a^7ts D ex 
t77'wio©yes) , ^wcr^^ifEnr^^x 

«£ft£«St^3 (Xf7 7"Wl 1) 0 
[0 0 6 8] JtLhOi 9 C*HJfiO^ 3 tc J;ti{f , - 
ao^-Jry h*«l^LT^«^tcfe^T^^'y his-a- 

[0069] mmmmi 

m&mx&z. mi 2tfe^T, 01 tisicfiiffigp^ 

[0 0 7 0] ±E^J|£0^1SV^L3T*1±, lOfDft 
§15* -y h7-^ 3** 1 oo^-^r 2 ^^LT^gP^-y h 

^2 oa, 2 0B£?ru ^mmmm^vhv-z 
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[0 0 7 1] iO^ftWfctt, ^©nytfa-^i/Xx 
Att, 2OOrtS*fb7-i'Z0A, 2 0B£#L, 
Vvf nt>7P— 5? 2 1 A, 2 1 B*fl-LTft»*y h7- 
^ 1 icMJnTl^o #rt8B*yh7-?2 0A, 2 
0B^±t>3;ft, >lr-9 2 2%ftLTimZlYC^Zo 
2 -30^95* v h7-?2 0 A, 2 0Bt±, /iiilffl 

HSS©EiNT(i, ^E77-trX£|!p#$»lj-£nja6 
1£©£5 2o©F«9g|S*yh7-2 2 0A, 2 0B*^t 10 
h7-7£«cLT^.f> Q 

con>tra-^*yh7-fj±, 

3£H*.T^5 0 ±ffiiagH2 3tt, F"ja5^yh7- 
^f-MSLTlStt^n, 2-D<D)V-Z2 1 A, 2 1 B£ 
Hfflii2 4A, 2 4 B^LTg^ftTV^ 
[0 0 7 2] HI 3tt, ±fE20©;l/-£2 1 A, 2 1 
B*5<fctf±tiMg§2 3©rtSP«flE^1-7P'y^0 
■Pft So 2O0/I/-2 2 1 A, 2 1 Bti, l^-fhfe, * 

ftAfcHJffil l£*LTV^ 0 -^«A^t±J0[5 1 l 20 

tt> HJ(S©JKffil&^L3©^fti*»fcraflt(t:, -fe^a 

fcfc£^IE77-t:X©1£tfj£^TV^ 0 $ 
fe, 2 l A, 2 i Btt, ^IE77-bX©aA£: 

^tULftif^fC, ^I7i'-l!XttfflM^**ffl«2 4 

a, 2 4 B^LT±fi^agi2 3izmm% a 

77-tzX^fctHS^ ^IE7?-bX£^tfjLfti:i:^ 

[0073] ±.mmm 2 3 1±, M^w^gp 2 3 a £ 

ULTV^o ft^J^aP2 3 a (4, 2 0«J[)/U-^2 1 30 
A, 2 1Bfrttm7?-te7.m&m^*$MLTctP&ft 

T?&S 0 .tiEOAdfc:, 2-D<D;l~5 2 1 A, 2 1 B 

S5o Lfetf^T, -£©^#T^iE7£-feXtf&tfi 

snfci^ fw©;b-^Tt^iE7^-bx^ai?n 

SRriitttf»*. tJtnU -£©;]/-£ fc*5^T^IE7 
**XT*fc££fcaj£ftfc*§£T*;fc^Tfc, flW©^- 

3lC*5^T, ffi#©;l/-*2 1 A, 2 1 B^P»^iE7^ 
^X^filM^§fiLftc^£fri;LT, *IE7*-fe 
XO^Atf £S tW^t" § C LT^5„ WEB* 
ti, ^^^Xftatft^Sft^©/!/-^ SfttijUg 

[0 0 7 4] 01 4tt, ^AMl^l liC&W^T? 
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o) , MA^tij^i in, ^mammrtZo 

n ACfrEfctfJ L t WS n th£U:T-£ft{f 
(Xf'y7X2©YES) , ftAfctfJgBl Hi, #-h 

72*z$m%*fi&u m^jE7ttzmm 
mm 2 4 a * tea 2 4 b zft Lxtmwm 2 3 
icmmtz (xt7^x3) „ 

[0 0 7 5] J:TOIgg2 3f4, 5 <t 5 t , ffi 

£ ©;l/- £ 6^FIE7 ^ -fe X^tBft^gfi L ft £fr 
fc)SLTW£{I^;l/-^c£fiTi>o f3A$ 

a»i ^E7^-trx^ani#*±ffiiass2 3 

fciMflLftfiL *J3£{=^*3fiLfefr§fr£PJgiJt5 

[0076] wzmzzmLm^ mnmmff 

ft LT V^tU4\ Btfr K*IE7 * -txmiTV> 

1 0£7£-feXL, flflP*? h7-^ 1 i:©8$E;itf-h 

LfcaSfcSKWJ^tfSS** LTV W ¥45 
7^-b^*0«taT*5fc**5n5fr5, «A«tB3B 

1 1 i4. ^SEftl«*»7tS 0 

[o o 7 7] 0 1 5t±, ±ffisaan2 3 commit 

2 3 3fcm%mmmmttmmt%tctb<D7u-? 

■V-hT&S, ^W£^2 3ai4, ^IE7£-feX&tb 
{i^£g{iLftfr§fr£WgiJT§ Ur>7Yl) . * 
JE75HXtf>fom%%mtZ>t Uf-v^YlOYE 
S) , M§W£gP2 3at4, flfcfi<0;l/-**p5;frE7* 

2) „ ft«W^g|52 3 at4, ^^JS'MaoMS&^e^ 
^fe&tlf—^Btra^jiL/c^S^^WgiJL (Xr 
■V7Y3), ±l5-S^r^giStS$t?±E¥iJS'Ma 
*»OjgL*fTt5 0 2^V)\^*ftttlE7 

[0 0 7 8] ±!2Xr i y7'Y 3tcfcV^T-SBf^^^ 
Lfct¥iJBiJ?n5iT*©P^t, ±I2Xf-'y7 , Y2tc*3V^ 
TfW©;l/- ^ *^ ^17 £ -b X^ttiff^^gM L ft t 
WlZtiZt, mWZ.^2 3 at4, ^iE7?-feX©% 

&ziii%.tzwfemzmfi<Dft-zfcmmz (xr 

>y7Y4) c i:ffiXx-y7 , Y2tc*V^T{fi^©;l/ 

- ^ jtr* e> ^FiE7 ^ -b x^tufi %*%m l ft t wsy^ m 
m<DmjcT*h%>i-^<Dm%7t*xmmto 

■PS5fc#A5ft«A^, gS*J£«2 3al±, ^E7 
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n&mmmmmtzrcmmmx&So a>-*2 

1 A, 2 1 Bti, l^-fnt), afgyDNn/I/OPgltL 
T, »m T-*'J>* (D/L) 1, I PI, TC 
Plfc%fctf±{fcAPJl£*rLTV>5 0 ;b-^2 Hi, ^ 
$-'yb£*'yT-7-£jn?£5I Pl&SWih^x 
#-HT?*5TCP|T?fiLT^, I PSSfcli 

t c ?mx<Dwmmz, m^mm2 3 tii^n 

«a<D/V-*fcT*IE7^X©£Atffcaj2nfcig£ 10 

JE7**XOiIAtf&Sfr§fr£«£LT^§ 0 Lfttf 
oT, l-oco;I/-^tfcV^T^jtE7^-bX^Mffi1"5cfc 
Dt, ^I7^X£§tm^£<>£liigf-W$Tt 

[0 0 8 1] ft*, J^EOKWPtt, 20©rta$*y h 
7-2 2 OA, 2 0 B^n j fn;l/-^2 1 A, 21B 

[0 0 8 2] $tt<0$tt5 

±IH*JfiOJK!641fti, ±ffigSS*2 3Kfc^T*S 
£>/V-#2 1 A, 2 l B'NC^-feXtfiHfcESSU ± 

fOTisa 2 3 las^x^fiEr ttrmmmmm 

ffoT^D, ;b-?2 l A, 21 B(im(c±tiM81 

2 3«^JBfo:ffid©#T?S3o ctifcttLT, *5ISfc<D 

loo;l/-^(c*5V>T^iE7^^XOfiA 30 

[0083] i: d f¥^rn{f , *nmmm 5 t^s 3 
>^a-^-/xr^ mnmmmA mnic 2 

h7-^2 0 A, 2 0 BfcJttUftUl/-* 
2 1 A, 2 1 B£fl-LTflg|S*-y h7-^ 1 tcg^L/c 
Ifj&t&oTfcD, l^aP^y b7-7 2 OA, 2 0B(c 
HiILT&/i/-*2 1 A, 2 1 Bfcj8^tlfc±ffiWS 
S12 3*mT^Z> 0 m?y\? i/XT Lit, 40 
?5fc, 0 1 ZiCVmT^ti:oi^ )1~5 2 1A, 2 

«H?aVf«fc5fc:, 2 1 A, 2 1 BrtOfftA&ft 

g|Jl iP±£#ffl$3 0£ftLT*BSJgMLTt,^ 0 

[ 0 0 8 4 ] mi 7 *m<r» 5 mmmm 

«aE»ffl%SSlBt5feft07n— f+-hif$5 0 MA 
*£ti}0P l l (i, ±a© <fc 5 ^A^WSB l 1 tt> «fefB 
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&3fr£fr£«f5 (Xf-y7Z2) „ SitflcO&a 
n^E^tfiLtV^finth^riT'fentf (Xx-y7Z 2 

©no) . gAlftfflgui n±, mm&zmtz, - 

1$ (Xr > y7 P Z2£)YES) , fIA&tiJ$ 1 1 (i, 
bifiBf*;l/-^>^g|5l OKilfil-rSOKjfcitoT, 7 
**Xl^fii^{§*f£m£U ^77-feXttMSfI 
^^HfflH^LTflfiO^-^KaSfltS (X7-y7Z 
3) c i:Se7^XttM£fi^{i, ffi©;b-^£D7^ 

ti, ±fd77-feX:tTOEff^, ffi®;l/-*<£>7?-fe 

[0 0 8 5] te©;l/-*ti, t£$T5£?tc, 

i Hi, iMfIfi^^§fitfc7b^^^JS'Jt§ (xr? 

7Z4) 0 jgf8fl^*§«Lfctg£ (XT7 7Z4<DY 

es) , fiA^m^ 1 1 mmmm^znx^ 
zmmmmmnicm^x, fs©;i>-*©7?-fextf 

iftfcStffi-fS (XT7 7Z5) o 

[0 0 8 6] .fc^mttWKtt, gAMl Hi, _h«2 

Ut^nth«fcDt^SftS2©U*lHikthW±T»a& 
ift&ftltmitZo ±ES2«DLtHSkth{±, 

>bzmx&% 0 

[0 0 8 7] ±|3«|jift0^an*^2«Db*V^kth 

*siT*sntf, e;i/-^t^LT©*7^-bxatf^Q 

LTv^fc^etiS*^, flA^tB^2 2t±, 
S*^7tS 0 ±HS«iitt©&antf!l!2?)L£ 
k th£i±T*3&ntf , fl&©;l/- 9 (C fet >T 1 7 * -fe X 

Sjb^tc^<^E7^-bXT*^«^1tA^^ia^ 
t#^6ti5^?>, fiAfcfflBPl ll±, ^-^>^1 
0(C7^-tXLT^*7 f-7-^ 1 i:tD»^-htD 
J!SSWf*^-r5 (XT-y7°Z6) 0 Jft, MA^tHnE 1 
1«, ^I7^^X©MA^tiibfcgtD^-y-t-^ 
#tfffiSfi#*±{LEiaSS2 3t^M-rS (Xr-y7 
Z7) „ 

[o o 8 8] m 1 8i±, t-mmmms icmmxmta 

Ml 1 tc*3lj-§7^-tXtt?ffijg{HMIIWi!1-5rci6© 
7D-f-v-hTS§o C©7^X#Mff4gLiIi±, 

[0 0 8 9] MA^ffigl? 1 1 m>jb-Z1?t>7t* 

7,wmmm*m irzpmzwmz (xt 7 7 0 
r 1 ) o 7^-bx«M^^§fiuftii^ am 

WaJlItt. 7^i!Xtt}HCTi^cD;b-^tc®aT5 
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[0 0 9 0] 01 9i±, ±$©/l/-£2 1 A, 2 1 B© 

1 A, 2 1 Btt, v-fftfe, iifl7nb:i;l/©li!^L 
T, feUff, T-*y>* (D/L) 1, I PI, TC 
PSts.J;tf±ffiA Pl£*rLTVS 0 2 l ©T C 
PJgtt, ^^^^©MAo^&^tttSo 
2 1 ©t c Pitt, *©fcttiiies*ffcS©;i'-* 2 1 © 10 

T C Pj^ilftU ii£©/b-* 2 1 ©T C PMfr?>7 

^•fex$ift©ii£n£§ttSo ife, ;i/-^2 i©tcp 

Jgtt, 3^7**Xttft*±fimagMfciift]-f3o 
[0 0 9 1] U±©J:^*flffi©ff^5KJ;fttt, ffi 

A©ftAfctfi$£#£fc^T*IE7*-tzX©<lA©*r*S 
£W9JLTVS„ Lfcft^T, ±WlgS2 3fCTM 

MtcWrfSCfctfTtSo ^©fcfe, ^E7^-teXfc 20 
ttTSJfg^fflii^ i; 5 c ttfT't So 
[0 0 9 2] ft*5, ±^©B4^Tl±, 2O0flPy h 
7—^ 2 OA, 2 0BtfWfft;P-2 2 1 A, 21B 

tt^m, LfrU 3W±©l>3»*'yh9-*3« 
?ft^ft/P-££^LT^g|3*-y h7-^7 1 t^LT 
^§3ytfa-^^-y h7-^C}o^T&, S^*SS© 

[0 0 9 3] HS£©?B^6 

02Ott, *3gE©£ffi©BI&6fcffi*£A8itii8iItf 30 
ffli^ftfe^y^-^-y b7-^©£#HI$£ST 

m£mx&% 0 mzoic&^x, mi tmcmmm^ic 

[0 0 9 4] ±K^5S©Ml5m g;l/-*©7*-tr 
XM©itftD35)^iE7 ^-fcX?&S fr3^£Jll!f S fcs6 
(c, ffi©;l/-£©7^X^£#5ILT^So cnt 
ttLT, *HSI©JgSi6Tftt, i^-^©7^-trXM© 
Jfttatf*iE7 £ -b XT'ifc § frgfr fc^S* 5 ft ffi© 
# ©7 £ -fe 7>fflR.*&mt %tt$>iz, fa©;!/- £ 
©^Eltft Lf (W§ n th£fte©/!/-^#TffiETS <I 40 

[0095] xmmtm, mm^-tit, ±i£© 

I7^-trX^lii^i : oTi/>5o Jta©^-^** 
iE7 £ -tX^Btf^tt 5 njfj6tt©$ 5 1> <om±V8> S 
<DX\ lO0A>-*£;l5^T*iE7£*;UPttdJ3nn 
{£, ffi©/t/-£{C&^Tk^IE7^X£WT^SRf 
fgfW&So LfrU ^tt0atf*jE4fctHL£t*tfn 
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7 ^ Xic fcW £> ms©Mft£*r t © t e> ft 

S„ *CT?, *^Sfi©^!H7T*tt, ^17^-tX^tH© 
-^m&T«(cffiiETSiii:icJ;f5, ^E7^X© 

ttm^s*iRi±?-a-, Kit u#sjc? 

[0 0 9 6] ^Sgom^fC^S^yei-^T^y b 
7-^tt, WBMMfrv b7-^4 OA, 40B, 4 
0C, 4 0D*^U $t*l)V-ZA 1 A, 4 1 B, 4 1 
C, 4 ID (J^TimfStttt T;V-^4 lj £^ 
5) £^LTflBI5*'yb7-£l£8f!;?ftT^5 0 C 
ft?)^-^4 1 A, 4 1 B, 4 1 C, 4 1 Dt±, litS 

mmmz>fr~?tmm4 2^Lxmmznx^ 

So JcDHftlftfctt, ^$?©;b-£4 1 A~4 1 Dtt, 

n>t?a-**-y b7-^tt, MS©rtg^7h7-^ 
4 OA -4 0DtiiatT^Sftfc±fimiigfi4 3 
5r«^T^So H4flgS4 3tt, §;l/-^4 1 A, 
4 1B, 4 1 C, 4 1DK$ffltt4 4A, 4 4B, 4 4 
C, 4 4D^frbT^ft? , ft^?ft, t^T©;u-^ 
4 1 A~4 l Dfcfctt57**Xtti«*ig8lf 58It&& 

^lt^Sc rtas*v h7-^4 ora±t;i<-* 

4 6^/>bT^ftf fttg5g^$ftTV>So 
[0 0 9 7] 02 1 tt, Wk<D)l~^ 4 1 <Dpiffiffim% 
jfitfuyW&oZ, &)\s-$A ltt, ±I5*SS©fFJ 

Vfr-f-ymi o^«x.tv^So mxmmi 1 

tt, t&gWKRJg-rS;l/-?4 l©fIA^tHgPl l fc« 

mgPl ltt, jga©ffiiEL$l^mth*iaitt«?ifEL 
tWSIElt^5 O^tLT^So JiffiffilELt^fimth 
tt , < t *!Efcm L t V ^ffi n th i 0 1 <b Z ft fl 

fgnth©?|IEfii:LT^Jffl$ftSt©TfeSo ffiiELt 
V>€mthtt, ft^^tt', TO&ftLtlilnthiDfca 
%1-"^>'h?<45^a©filT*fe5 0 ftfe, ffiEbtlMil 
mth^ 1 r3JEttKJ£LTfc±^»: fcttfcSSA'-efcao 
[0 0 9 8] 02 2 tt, ^A^mgB 1 ncfcltS^lft 

A^ffiglSl ltt, $^J£»m:f5gbT (Xf'yy 
N1©YES) , ^l^fBtign l bfcBGLT^&m 

igft©^.a n u 1 1 ^fiiangp 1 1 a immz nx i ^ s 

^iEft tH L^^fi n thW ±T* & S ^SA^WSJt S (X 
*)iT?fefttt (Xx-y7°N 2 ©NO) , MA&ttJgBl 1 

tt, ^MMa^^TtSo -15. wmmmnmiE 

LtVMfin thW±Tfetltf (Xr i y T'N 2 © Y E 
S) , ISA^tilgPi ltt, 
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[0 0 9 9] l o0/l/-*©ftMafflaHrSffiiEffi^g 
*§tf2£ffi?n5fc. ftoT^T©;b-*©MA*£.ffi^ 

%m l tcte&frZmit 5 (Xt 7^N4) 0 10 

[oioo] t<T<Dmmmz%m%t 

N 4 oy E S) , ^AfctfigB l l li, SsSiHHPffc^ 

-y^N5) o J^H&WtC^ ftAfctHSBl Hi, 
ftO^St n &m 2 © L £ WS k thW±T-fe £ frSfr^T 

[oioi] -StJ^W±-pfcfttfs tf!j©;b-*T*£>7 
^X*tf§Jitrit!jBLT^IE77-feX-e& SSjfStttf 

[0 1 0 2] XT'y?N7ti;, ilt^f^Ttf);!/-^ 

TO^-*4 l^I^ttiL$t^ffinth©«^-^l 
[0 10 3] 02 3 «, fiA^tfJfftl 1 <D7t*7Jm 

1) , ^E^diLt^fiinth(0SiiE©^tt^JBft5 
(XT7 7M2) 0 JcDHWlta^ lAfcttiSPl 1 40 

t±, ^B^ign^i 1 bictzmzftT^m'mmtii 

n tffilELtf ffigBfiSSS Ofcfaig?nri^ffliELt 
V m th £ Kim U Wmfo<DW& n f ©ffiiE L 

[0 10 4] *£W©«aan*»}fc**ftifEL#V^ 
nth^ffiiET^ (Xf77"M3) „ J: D Hftfitycfi, fS 
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At&fiiELtiMImth£#£t5 0 MA^tBgUl 1 
LtWInthtLT^"^ ftAfttfJgBl 1 

fI^^fH^b-^4 ltCjUTTS (Xf7^M 
4) 0 

[o i o 5] -?k mmm>mLnm^x<ommL^ 

l/^filmthW±T*S51^ (Xr^y^MZCYES) , ft§ 

§«MU i^®fiff^Sft7c«;b-^4 ncjgfi 

** (XT7 7M5) o 

[0 10 6] £5>fc, flAfcttiSISl 1MU ±fB§fl£ft 
6) 0 

[0 1 0 7] 02 4 (±, ±$?>4 0(D;!/-#©?-5;t/- 

f4u, 4 1 b, 41 cmmmmcmmtzrc 

fto»S:H-C*«o 4 l ti, iHI7a bnjKDPg 
®i:LT, ffliK f-^'J^ (D/L) 1, I P 
1, TCPl6J:tf±ffiAPl*^LT^«e 
[0 10 8] fcfcAfcfJl/-* 4 1 AOTCPlfcfc^T 
^IE7^-bXA^Ul*ftfc»^ i^-^4 1 AO± 

(DWkn^mm^-^ A 1 BO±fiEAPlfCi§a]f 
3 D >I/-*4 l B©±feAPlti, S^jM^jS^LT 
^FIE^tti L t VMS n th*MiE 5 Wtm.tZ C £ ft 
<, 7^^XttM43j:a : ffiIE©W&^JMfH7C^-^4 
1 AcD±feAPltigfiT§ 0 Sft, ;t/-^4 1 B£0± 

fiAPlti, ;i/-^4 i AA^oil^Bfgfrs^-^ 

4 1 C(D±_{tLA?Mimm%o k-*A I CcD±ffiA 
PJItt, ±IHii»t<:^LT^I^aL^V^nth^f 
iEL*5V^ifiE1-5c:fc&<, 7^-t?X^jafc ( tmf 
E©Wte?:;l'-^4 l B0±teAPitcMf§1"§ o 
^4 l B0±fitAPMti\ ^iMMrt§^^P>t-;V-^ 
4 l A(ciMff-r5 0 ;b-^4 l A£D±fiAPJl 

tf/$rdmiEo^mmTsmm \ 3 fca^t-§ 0 

[0 10 9] U±©J;^K*^fi|tDKM6tCj;nti\ flfi 
X«c0igiP^iE7^-tXT'S§*^^WSiJUTV^ 

^7^-bX^fcjSl:TffiELTV^*^. tLt^O 
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[oiio] mt&vmmi 

[0 1 1 1] ±fH*S6©J$§l&^L6Ttt, )1~^\t 

LTV^o CftfcftLT, #^Bfi©Ba£7T?li, lO© 
rtSP*-y h7-^cflLT£S©>l/-*£8&U 

i oo^-if^fflgijtc*n^n3*jsf»rits tilt io 
totzv- zzmmnwir 7 h as* -y 

^Tf±giJ©+l— ^ (fcfcOif— >9 fcfe^U S^*5 

[0112] &a©-9— tfxfc&flrrs io«^»7 

±3ErtflP*vh7-2fc#LT««0;l'-** 

fStS&t^-^tStf, ^fc^^-^T^lE 
[0 1 1 3] ±DBS£tnif, 10©f^gp^y h7-? 

3 (±, fcftowi/-* 6 o A, 6 o B, 60C CWTISfSP 

iTSfcftS T;l/-£6 0J £1^3) £ftET*1-g|5*-yE 
7-* 1 fcSNSEarhWSo &;V-£60A, 60B, 
6 0Cti, ^n?n, l -ao-9-— ifxagiJlcj^jSLTv^ 

§i3"-exagij[±, fc^iif, *-/l/+h-l£X, 7x7* 

+)— - trxtsi^F t pu--tfx?fc3 0 cft&oij-— 
xagij(±, /^-y bo^'y^is^nrv^iMM^ 

[0 114] 6 OA, 6 OB, 6 0C(Cti, * 

fi-ftl, tstOV-rtG 1 A, 6 1B, 6 1 C oxTie 

TV5o &&ilD"t-^6 1 A, 6 1B, 6 1 Cl±, "f 

•i'XlgiJ©?^ g^2ftT^"£;l/-*6 0A, 60 

b, 6 0 c ictmm^tix^m-^mmmm 

-tfxagi]©/^y h^iUktU ^!E7^-tX©^A 
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So 

[0 1 1 5] mz 6&, #HS6i©E!£7tcffi5ftAt&aj 
gpi ncfcnt§1Si§ft^/ffi»l^Mr§fcJ6© 
7n-^+-hT**5o 4*5, *^Sfi©mi7tfe^T 

[0116] ham^i n±, m&i 2^p>^^-7 

h*JW#T5fc (Xr-y7Ql) , ^7^7 

^*«nu-r« (xt77°q2) o -e©^ fiA^^ 

ti, ^tttHJnfc^>y^©Sflt°-F^#HS,L, ft 
|;^^T^5WWJf5 (X7-y7Q3) 0 

[0 1 17] ttft/<*-yhT?fctitf (Xr-y7Q3©Y 
ES) , fSA&tti^l lt±, ±ia^ffi©fl5Hl4^L3 

(Xr-y 7Q 4) 0 H^tcti, 
{SA^tBSG l i fci. HSS©ffM 1 TTOLfcH 5 tcfctf 
SXf-y7S 3~S 9<Dmmm?Zo £fctt, fiA 
f&fJS lid, 'mPM% 2 Tn^ L fcH 9 « X 
r>y 7°V3-V1 3©^M^t1-5 0 Sfcti, SAtt 
ttiWl Hi, IWl3T«f;ll lfcfcltSX 

f7^w3~wi 1 ©iaa^^fiT?.. 

[0 118] -7], 5t^^-y bTSttnii" (Xr-y7 
Q3©N0) , gA^ffiSPl Hi, i^^vhOtftS 
*P±-T5 (Xr-y7Q5) „ T&b*3, 
tov^T«iif*©±fi)c/g«a^fTt54v> 0 E^ U 

L (Xr'y7Q6) , SIS^tT-^nft/^-y h*W(S 
T3i5i:Dt>--^6 nc^f§ (Xr'y7Q7) „ 

[0 1 1 9] i2 7t±, ^mmm! \m%&t*)*t 

[0 l 2 0] fet9iJ--/<6 1 ti, 6 0©fIAI^ 
mail lA^^^-y h*aflT5fc (Xr-y7Pi©Y 
ES) , ±|2^©^Hl4^E3©V^tl^T«E 

Hf5«yi**fft5 (Xr^7P2) 0 Hftfitycti, 

ftA^tHgp 1 1 tt, rnmmm 1 t« Lftgi 5 tc^tt 

SXy">y7S 3~S 9©jffil*SfTr5o Sft(±, flA 

x>y7V3~V 1 3©®g£Hfir1-£» 0 Sfcti, fiA^ 

r>y7W3~Wl l©Ma^^fft§ 0 
[0 12 1] JtjSt5;I/-^6 0tfeV^T 



(15) 

27 

TW^u?*mm%z *■©£«>, 
[0122] mzsi^ b-$f>o<DMf&mimfcm 
wi<ommtLr, $mm, f-^'j^ cd/d 

I PI, TCPSfe<J;t;±&APl^LTV>S 0 
$fe, /V-£6 OB, h7— J'lT'SS I Pfifci 
tfh7>X^-HTS5TCPlOH|t I DSl^ 

[0 12 3] )}^$2\c3mt%*>r»j\>0 : ?*>ftfk£ 10 
t51t-lf^ag[JO/^«yhtt, I PJfJUtfTCPJl 

fyftLT i d sitcte^rsaa^n, A 7 ^^f-^ 

t5^aigiJJ.»^'vMi I PMfrZtit*) 

[0124] j^±© J: ? t c (Dmmmm 1 1 ± n & 

7 hSlOO-y— t"X«BlJlC$(3iAA/t?^£©T\ 20 
§ 0 *©fcik ■b+aUrw-flfiO^fe-lHSCt 

[0125] Lfrt, imm-zmmmv/vrv 

U "5-9—^6 1 £T=frE7*-feX©fctf}tt& 

yKc^TfettttfSCfcj^-ptSo *©ft», 1^ 30 
©If- <£X»C^t^I7 2 -t?X^til«6l^tt^|S]± 
T*t*fr5, £f*£LT, *IE7*-fe*fctiJ©W££[R] 

[0 l 2 6] ±3^©|tt^T*tt, 1 oa)rt^'y b 
7-^3 t: § J§£ fc o T 

l ^)©-9--lf^o**fflffi , rsJg^n:tt, F7 

[0 12 7] ffi©^SS(O®e*^©^lf£t0^£0ira 
ti£U:©i:*5 D , #8Eti±M©*jfi©J&ffiW 

ftfcfc^Ttt, EtherII7U-ZJ£ttT?ft<, Ethernet8 
02.37 U-ix, Ethernet802.27b-A, EthernetSNAP 
*H*^T©Ether7l>-A*ffl^5Cfctf?£S 0 
[0 12 8] 
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SS-fev'H D D 0 S SSft £©^IE77-fe 

■f 3 c * < ^IE7 ^7©fIA£g aWfcUHJT?* 

[0 1 ] *m°>mmm 1 t^ss Astasia* 

[02] /^»y h©P$£**«fcg:@T'£5 0 
[03] ;b-*©ft§M£^t7n^0?3S§ o 
[04] ^Siift^m^-C-^So 

[05] mmm/mmmmmt^rzi6<D7u 

[06] ^*®WMIS9^1-5fei6©7n-^^ 

[07] m&mmmmmrzfcibvyu-i- 
[08] ^i«©««2Kfli««sfi(**^-r»a:HTf 

[0 9 ] **J6©JBS8 2 tc f£5liiift£$/«WS 
[010] ;V-^^^«^^tSft46tDlSt 
[011] *£ffi©^!£ 3 £ft£f|£tt££/tt^ 
[012] *?gBjI©^l©MI 4 tc<l§MA^tt!gM 

[013] 2 o©;l/-^fe J:fttag«©^g|J«i 

[014] ffA^m^^^T^f^n^^^S^ 
$«&Wf 3fc&©7n--^ -v- hT-SSo 

[015] ±f*mggg©^PJ£i$fcfctt5«#W 
^«ta*Ui^-r5ft4&©70- : f +-hT*S5o 

[016] ±2E©;l/-5f©«|fl£*SI^K^r5/c 
J6©jSt^0Tfe§„ 

[017] *m©ffM 5 izmmmmmmz 
itffl-r«fcft©7D-^-v—htfe5 0 

[01 8] *^SS©mi5tffSSA^WgWc:fe^5 
7 ^ -fe XttiHjgfiJDa*lKWf 3fci6©7n-^-h 

[019] ;i/-*©li(££^«mi!H*5fci&©*|f 

[020] ^mmmmmmemmxmmm 
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* [027] xm&mmncmtstw-jvcw 

[022] ®xmmtcm&mmm&mmm &m*3Lf&/mm&m*&rcib<Dyu-**-- 

[023] ^&m<D7t*xmi&mm&m [02 s] ^-^eD«^»^wfc:iii^"r«fta6o«E 

[02 4] ±m<D4^«D}l~$<D5*>3-D<D)l-t><T) [fiF^©Kffl 

^fi? ; &SffiWfcUiWr5fc460«fcl:g|Tfe5 0 1 fl.B|5*vh7-2, 2 3 ft§tf*yh7 

[02 5] *^<D^©^fi|7K^SftA«iaiS» -f, 11 iAftdiS, 1 i a LtV«» 1 

mwtitz3yv=L-?*yby-9<D£#miL&* u mittMEttSk 2 1 a, 2 1 b ^-^,23 

fffi^ST'SSo 10 ±mm^m. 23a «aw^ 4oa~4od 

[026] ^mmmmummxmtiimicm^ mzvhv-t, 4 1 a~4 id ^-^,43 _t 

^ft^j3t/«^aw^i-§/ci6«7D-5 L +-h feiigi, 50 MiEtt^fiiaiig^ goa-so 

* C 6 1A-61C is^+J--/^ 
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